eee - Cellebrite 


Triage Profile Management Offline Tool 


User Guide 


April 2024 


‘:: Cellebrite 


Introduction 


Cellebrite Triage Profile Management Offline Tool enables you to create and edit profiles for implementing targeted 


scanning in Triage Profile Management Offline Tool. 


With this tool you can import and edit existing profiles or create profiles from scratch. 
To install the software, do the following: 
1. Download the Triage Profiles Management Offline Tool setup from MyCellebrite portal. 


2. Install the application on the relevant endpoint. 


3. Run the application from the Digital Triage Profile Management Offline Tool shortcut. 
To create new profiles, do the following: 


1. Click Create Profile and fill in the fields in the Details and the Scan criteria sections. 


Digital Triage profile management 


7 : | an 
ns 


Owner 


, 


There are no profiles added 


2. Click Add Criteria. 


2 hia 
ap Search criteria + AddCriteria v 


B Delete (R Import + Template 


To enhance search capabilities, enter the relevant keywords to add them as scan criteria. 


The scan will be done on the following content types in this order: WhatsApp, Native SMS. 


Adjust settings under ‘Manage Scan Types’ on the profile management page 


Severity * 


This field is required 


3. Select one of the data types from the drop-down list. 
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IMEI 

IMSI 

Installed Apps 

User Accounts 
Emails 

Phone Numbers 
Locations (Countries) 
Keywords 


The following table provides additional information about each data type: 


pate Type Data Specified in the Triage Content Extracted from the Matching Logic 
Profile Device 
The list of IMEI 

IMEI (International Mobile The device's IMEI Exact match 
Equipment Identity] values 
The list of IMSI| 

IMSI (International Mobile The subscriber's IMSI| Exact match 
Subscriber Identity] values 


List of applications 


(Android/iOS}. Applications 


Installed Senessc eo oe Applications currently Exact match [not 


or the application package 
name [for example, 
com.whatsapp] can be 
entered manually. 


User A list of usernames [e.g., Davies Sccounes Phone Exact match [not 
Accounts Apple ID] eentaces case-sensitive] 
Device accounts Phone Exact match (not 
Emails A list of email addresses os | 
contacts case-sensitive] 


Apps installed on this device case-sensitive] 
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Phone 
Numbers 


Locations 
(Countries] 


Keywords 


4. Click Export. 


A list of full phone numbers 
(including country code} 


List of countries from the 
predefined countries list 


List of words or phrases 
(between 2 and 200 
characters] 


Device accounts Phone 
contacts Phone call logs 


Android: Coordinates 
extracted from Samsung 
Rubin, media file DBs and 
connected WiFi information 
iOS: Coordinates extracted 
from 10S services and media 
file DBs 


WhatsApp, Native SMS 
chats 


9. Save the TriageProfiles.json in C:\ProgramData\Cellebrite Di\Inseyets UFED. 


To edit existing profiles, do the following: 


1. Click Import and select TriageProfiles.json to upload current profiles to the application. 


2. Click Edit for the selected profile from the menu. 


3. Edit the profile and click Export. 


4. Save the TriageProfiles.json in C:\ProgramData\Cellebrite Di\Inseyets UFED. 


If numbers 
extracted from the 
device are in local 
format (without the 
country code}, only 
the local part is 
compared 


Check for each 
extracted 
coordinate to see 
whether It is within 
one of the 
countries defined 
in the profile. 


Exact match (not 
case-sensitive] 


€ For more information how to run Triage scans, please refer to the Inseyets UFED User Manual. 
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